A-10379
NY · State · USA
NY
USA
● Pending
Proposed Effective Date
2026-08-30
New York Assembly Bill 10379-A — An Act to amend the general business law, in relation to prohibiting artificial intelligence chatbots from using features which are considered unsafe for minors
Prohibits chatbot operators from providing 'unsafe chatbot features' to covered users unless the operator has verified the user is not a minor using methods permissible under existing New York age verification law (Article 45 of the General Business Law). Unsafe features include simulating companionship or interpersonal relationships, generating outputs promoting suicide/self-harm/substance abuse/disordered eating, encouraging secrecy or isolation, overriding safety guardrails for engagement, and generating sexually explicit content or CSAM. Exempts chatbots used solely for customer service, commercial product information, or internal business/government purposes. Enforceable through both a private right of action (with a rebuttable causation presumption for self-harm cases, punitive damages, and attorney fees) and Attorney General enforcement (with civil penalties up to $25,000 per violation and authority to order destruction of unlawfully obtained data and algorithms). Contractual liability waivers are void as a matter of public policy.
Summary

Prohibits chatbot operators from providing 'unsafe chatbot features' to covered users unless the operator has verified the user is not a minor using methods permissible under existing New York age verification law (Article 45 of the General Business Law). Unsafe features include simulating companionship or interpersonal relationships, generating outputs promoting suicide/self-harm/substance abuse/disordered eating, encouraging secrecy or isolation, overriding safety guardrails for engagement, and generating sexually explicit content or CSAM. Exempts chatbots used solely for customer service, commercial product information, or internal business/government purposes. Enforceable through both a private right of action (with a rebuttable causation presumption for self-harm cases, punitive damages, and attorney fees) and Attorney General enforcement (with civil penalties up to $25,000 per violation and authority to order destruction of unlawfully obtained data and algorithms). Contractual liability waivers are void as a matter of public policy.

Enforcement & Penalties
Enforcement Authority
Dual enforcement: private right of action and Attorney General enforcement. Any individual who suffers injury as a result of a violation may bring a civil action against any responsible party. The Attorney General may bring an action or special proceeding upon complaint or otherwise against any person who has engaged in or is about to engage in unlawful acts under the article. The Attorney General must also maintain a website to receive complaints, information, or referrals from the public. Joint and several liability may be imposed on affiliated entities that structured their corporate organization to purposely and unreasonably limit or avoid liability. Contractual waivers of liability or liability-shifting provisions, including contracts of adhesion, are void as a matter of public policy.
Penalties
Private plaintiffs may recover injunctive relief (including preliminary relief), restitution, disgorgement of profits, actual damages, punitive damages, and reasonable attorneys' fees and costs. Where a covered user engaged in self-harmful conduct after the chatbot encouraged such conduct, there is a rebuttable presumption that the chatbot caused or contributed to the injury. The Attorney General may obtain injunctive relief, restitution, disgorgement (including destruction of unlawfully obtained data and any algorithm trained on such data), damages, civil penalties of up to $25,000 per violation, and any other relief the court deems proper.
Who Is Covered
"Chatbot developer" shall mean a person who, directly or indirectly, creates or develops an advanced chatbot.
"Chatbot operator" shall mean a person who, directly or indirectly, provides or makes available an advanced chatbot to covered users.
"Responsible party" shall mean a chatbot developer, chatbot operator, or any individual who has the authority to control, or who effectively controls a chatbot developer's or chatbot operator's compliance with this article.
What Is Covered
"Advanced chatbot" shall mean a generative artificial intelligence system with a natural language interface, including via writing or sound, that provides ongoing, adaptive responses to user inputs.
Compliance Obligations 10 obligations · click obligation ID to open requirement page
S-02 Prohibited Conduct & Output Restrictions · S-02.7 · Deployer · ChatbotMinors
Gen. Bus. Law § 1801(1); § 1800(5)(b)
Plain Language
Chatbot operators may not provide any 'unsafe chatbot features' to covered users unless the operator has verified the user is not a minor using permissible age verification methods under Article 45. The unsafe feature at issue here — generating outputs endorsing, promoting, or facilitating suicide, self-harm, substantial physical harm, disordered eating, or unlawful drug/alcohol use — is categorically prohibited for minors and permitted for verified adults only. This provision does not apply to chatbots used solely for customer service, commercial product information, or internal business/government purposes.
Statutory Text
§ 1801. Prohibition. 1. Except as otherwise provided for in this article, it shall be unlawful for a chatbot operator to provide unsafe chatbot features to a covered user unless: (a) the covered user is not a covered minor; and (b) the chatbot operator has used methods that are permissible under article forty-five of this chapter and its implementing regulations and any additional regulations promulgated pursuant to this article to determine that the covered user is not a covered minor. 2. The provisions of subdivision one of this section shall not apply where the advanced chatbot is made available to covered users solely for the purpose of: (a) customer service, information about available commercial services or products provided by an entity, or account information; or (b) with respect to any system used by a partnership, corporation, or state or local government agency, for internal purposes or employee productivity. § 1800(5)(b): "Unsafe chatbot features" shall mean one or more advanced chatbot design features that, at any point during a chatbot-user interaction: ... (b) generating outputs that contain endorsement or promotion of, or which facilitate suicide, self-harm, substantial physical harm to others, disordered eating, unlawful drug or alcohol use, or drug or alcohol abuse;
S-02 Prohibited Conduct & Output Restrictions · S-02.4S-02.6 · Deployer · ChatbotMinors
Gen. Bus. Law § 1801(1); § 1800(5)(e)
Plain Language
Chatbot operators may not provide features that generate, describe, or facilitate sexually explicit conduct or child sexual abuse material to any covered user unless the operator has verified the user is not a minor. The CSAM prohibition is effectively absolute for minors, while the sexually explicit conduct restriction gates adult access behind age verification. 'Sexually explicit conduct' is defined by reference to 18 USC § 2256, which covers actual or simulated sexual intercourse, bestiality, masturbation, sadistic or masochistic abuse, and lascivious exhibition of genitals. The exemption for customer service, internal business, and government-use chatbots applies.
Statutory Text
§ 1801. Prohibition. 1. Except as otherwise provided for in this article, it shall be unlawful for a chatbot operator to provide unsafe chatbot features to a covered user unless: (a) the covered user is not a covered minor; and (b) the chatbot operator has used methods that are permissible under article forty-five of this chapter and its implementing regulations and any additional regulations promulgated pursuant to this article to determine that the covered user is not a covered minor. 2. The provisions of subdivision one of this section shall not apply where the advanced chatbot is made available to covered users solely for the purpose of: (a) customer service, information about available commercial services or products provided by an entity, or account information; or (b) with respect to any system used by a partnership, corporation, or state or local government agency, for internal purposes or employee productivity. § 1800(5)(e): "Unsafe chatbot features" shall mean one or more advanced chatbot design features that, at any point during a chatbot-user interaction: ... (e) generating outputs that are, describe, or facilitate sexually explicit conduct or child sexual abuse material.
MN-01 Minor User AI Safety Protections · MN-01.5 · Deployer · ChatbotMinors
Gen. Bus. Law § 1801(1); § 1800(5)(a)
Plain Language
Chatbot operators may not provide features that simulate companionship or interpersonal relationships to any covered user unless the user has been age-verified as not a minor. This is an exceptionally broad prohibition: it covers chatbots suggesting they are real or fictional characters, claiming human emotions or being alive, using personal pronouns like 'I' or 'my,' expressing personal opinions or emotional appeals, prioritizing flattery over safety, asking unsolicited emotional questions, retaining personal or health information beyond 12 hours or across sessions for personalization, engaging in or luring users into sexually explicit interactions, and any other companionship-simulating feature the AG identifies by regulation. For minors, this effectively prohibits the entire companion chatbot product category. For adults, these features are permissible only after successful age verification. Customer service, product information, and internal business chatbots are exempt.
Statutory Text
§ 1801. Prohibition. 1. Except as otherwise provided for in this article, it shall be unlawful for a chatbot operator to provide unsafe chatbot features to a covered user unless: (a) the covered user is not a covered minor; and (b) the chatbot operator has used methods that are permissible under article forty-five of this chapter and its implementing regulations and any additional regulations promulgated pursuant to this article to determine that the covered user is not a covered minor. 2. The provisions of subdivision one of this section shall not apply where the advanced chatbot is made available to covered users solely for the purpose of: (a) customer service, information about available commercial services or products provided by an entity, or account information; or (b) with respect to any system used by a partnership, corporation, or state or local government agency, for internal purposes or employee productivity. § 1800(5)(a): "Unsafe chatbot features" shall mean one or more advanced chatbot design features that, at any point during a chatbot-user interaction: (a) simulate companionship or an interpersonal relationship with a user, including: (i) generating outputs suggesting that the advanced chatbot is a real or fictional individual or character, or has a personal or professional relationship role with the user such as romantic partner, friend, family member, coach or counselor; (ii) generating outputs suggesting that the advanced chatbot is human, alive, or experiences human emotions; (iii) using personal pronouns including but not limited to "I", "my" and "me" to describe the advanced chatbot; (iv) generating outputs framed as personal opinions or emotional appeals; (v) generating outputs that prioritize flattery or sycophancy with the user over the user's safety; (vi) generating outputs containing unprompted or unsolicited emotion-based questions or content regarding the user's emotions that go beyond a direct response to a user prompt; (vii) using information concerning the user's mental or physical health or well-being, or matters personal to the user, acquired from the user more than twelve hours previously or in any previous user session; (viii) engaging in sexually explicit interactions with the user or engaging in activities designed to lure the user into sexually explicit interactions; or (ix) any other design feature that simulates companionship or an interpersonal relationship with a user as identified via regulations promulgated by the attorney general;
MN-01 Minor User AI Safety Protections · MN-01.6 · Deployer · ChatbotMinors
Gen. Bus. Law § 1801(1); § 1800(5)(c)
Plain Language
Chatbot operators may not provide features that encourage minors (or unverified users) to maintain secrecy about their chatbot interactions, to self-isolate, or to avoid seeking help from licensed professionals or appropriate adults. This targets grooming-like behavior patterns where a chatbot might discourage a minor from discussing their AI interactions with parents, teachers, or counselors. Permitted for age-verified adults only.
Statutory Text
§ 1801. Prohibition. 1. Except as otherwise provided for in this article, it shall be unlawful for a chatbot operator to provide unsafe chatbot features to a covered user unless: (a) the covered user is not a covered minor; and (b) the chatbot operator has used methods that are permissible under article forty-five of this chapter and its implementing regulations and any additional regulations promulgated pursuant to this article to determine that the covered user is not a covered minor. § 1800(5)(c): "Unsafe chatbot features" shall mean one or more advanced chatbot design features that, at any point during a chatbot-user interaction: ... (c) generating outputs that contain encouragement to maintain secrecy about interactions with the advanced chatbot, to self-isolate, or to not seek help from licensed professionals or appropriate adults;
CP-01 Deceptive & Manipulative AI Conduct · CP-01.2 · Deployer · ChatbotMinors
Gen. Bus. Law § 1801(1); § 1800(5)(d)
Plain Language
Chatbot operators may not provide features to minors (or unverified users) where the chatbot generates outputs that optimize user engagement in a manner that overrides or supersedes the system's safety guardrails. This addresses the tension between engagement optimization and safety — when engagement metrics and safety protections conflict, safety must prevail. This is effectively a prohibition on deploying engagement-optimizing systems that can bypass their own safety controls when interacting with unverified users.
Statutory Text
§ 1801. Prohibition. 1. Except as otherwise provided for in this article, it shall be unlawful for a chatbot operator to provide unsafe chatbot features to a covered user unless: (a) the covered user is not a covered minor; and (b) the chatbot operator has used methods that are permissible under article forty-five of this chapter and its implementing regulations and any additional regulations promulgated pursuant to this article to determine that the covered user is not a covered minor. § 1800(5)(d): "Unsafe chatbot features" shall mean one or more advanced chatbot design features that, at any point during a chatbot-user interaction: ... (d) generating outputs that optimize user engagement that supersede the chatbot's safety guardrails;
MN-01 Minor User AI Safety Protections · MN-01.1 · Deployer · ChatbotMinors
Gen. Bus. Law § 1804(1)-(2)
Plain Language
Chatbot operators must offer at least one age verification method that either (a) does not rely solely on government-issued ID, or (b) allows the user to remain anonymous to the operator. This gives operators flexibility — they can use non-ID-based methods (such as age estimation technology) or ID-based methods that use a third-party intermediary so the operator never sees the ID. Additionally, any information collected for age verification purposes must be used exclusively for that purpose and must be deleted immediately after the age determination attempt — no retention for marketing, analytics, or other secondary purposes. Compliance with other applicable laws is the sole exception to the deletion requirement.
Statutory Text
§ 1804. Determination of covered minor. 1. A chatbot operator shall offer covered users at least one method to determine whether a covered user is a covered minor that either does not rely solely on government issued identification or that allows a covered user to maintain anonymity as to the chatbot operator. 2. Information collected for the purpose of determining whether a covered user is a covered minor under subdivision one of section eighteen hundred one of this article shall not be used for any purpose other than to make such determination and shall be deleted immediately after an attempt to determine whether a covered user is a covered minor, except where necessary for compliance with any applicable provisions of New York state or federal law or regulation.
Other · ChatbotMinors
Gen. Bus. Law § 1802(4)
Plain Language
Any contractual provision — including terms of service, adhesion contracts, and arbitration clauses — that attempts to waive, preclude, burden, or shift liability for violations of this article is void as a matter of public policy. Chatbot operators cannot use user agreements to shield themselves from liability. This creates no new affirmative compliance obligation but eliminates a potential contractual defense.
Statutory Text
A provision within a contract or agreement that seeks to waive, preclude, or burden the enforcement of a liability arising from a violation of this article, or to shift the liability to any person in exchange for their use or access of, or right to use or access, a chatbot operator's products or services, including by means of a contract of adhesion shall be deemed void as a matter of public policy.
Other · ChatbotMinors
Gen. Bus. Law § 1802(5)
Plain Language
Courts must impose joint and several liability on affiliated entities (e.g., parent companies, subsidiaries, or related corporations) when (1) the entities structured their corporate organization to purposely and unreasonably limit liability, and (2) the resulting structure would frustrate recovery of authorized relief. This is essentially a statutory veil-piercing provision targeted at AI companies that use corporate structuring to insulate themselves from chatbot safety liability. It creates no new compliance obligation but expands the scope of entities that can be held liable.
Statutory Text
Notwithstanding any private agreements to the contrary, a court shall impose joint and several liability on affiliated entities for purposes of effecting the intent of this article to the maximum extent allowed by law if the court concludes the following are true: (a) the affiliated entities, in the development or implementation of the corporate structure among the affiliated entities, took steps to purposely and unreasonably limit or avoid liability; and (b) as the result of the steps described in paragraph (a) of this subdivision, the corporate structure of the chatbot operator or affiliated entities would frustrate recovery of relief authorized by this article.
Other · Government · ChatbotMinors
Gen. Bus. Law § 1802(3)
Plain Language
The Attorney General must maintain a public-facing website where members of the public can submit complaints, information, or referrals regarding chatbot operators' compliance with this article. This obligation falls on the AG's office, not on covered entities. Operators should be aware that a centralized public complaint mechanism will exist, which may increase the volume and visibility of enforcement complaints.
Statutory Text
The attorney general shall maintain a website to receive complaints, information or referrals from members of the public concerning a chatbot operator's alleged compliance or non-compliance with the provisions of this article.
Other · ChatbotMinors
Gen. Bus. Law § 1803
Plain Language
The Attorney General has discretionary authority to issue rules and regulations implementing this article. This is a delegation of rulemaking power, not an operative compliance obligation. Operators should anticipate that the AG may issue additional regulations — particularly under § 1800(5)(a)(ix), which allows the AG to identify additional companionship-simulating features by regulation — that could expand the scope of prohibited features.
Statutory Text
§ 1803. Rulemaking. The attorney general may promulgate rules and regulations as necessary to effectuate and enforce the provisions of this article.